AmonRa
4 credited records · 4 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
28Monitor | CVE-2026-14335No exploit | Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameterssmub · easy digital downloads – ecommerce payments and subscriptions made easy · CWE-79 | High7.2 | — | 0.1% | 5 days ago |
17Monitor | CVE-2026-13471No exploit | LatePoint <= 5.6.3 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure via Abilities Rlatepoint · appointment booking plugin – latepoint | calendar & scheduling for wordpress · CWE-639 | Medium4.3 | — | 0.3% | Sep 18, 2026 |
25Monitor | CVE-2026-14987No exploit | GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Settingstellarwp · givewp – donation plugin and fundraising platform · CWE-79 | Medium6.4 | — | 0.3% | Jul 16, 2026 |
25Monitor | CVE-2026-13246No exploit | GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attributestellarwp · givewp – donation plugin and fundraising platform · CWE-79 | Medium6.4 | — | 0.4% | Jul 1, 2026 |
- CVE-2026-1433528Monitor
Easy Digital Downloads <= 3.6.9 - Unauthenticated Stored Cross-Site Scripting via PayPal IPN Parameters
HighCVSS 7.2No exploitEPSS 0%smub · easy digital downloads – ecommerce payments and subscriptions made easy5 days ago
- CVE-2026-1347117Monitor
LatePoint <= 5.6.3 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure via Abilities R
MediumCVSS 4.3No exploitEPSS 0%latepoint · appointment booking plugin – latepoint | calendar & scheduling for wordpressSep 18, 2026
- CVE-2026-1498725Monitor
GiveWP <= 4.16.3 - Authenticated (Give Worker+) Stored Cross-Site Scripting via 'twitter_message' Sequoia Template Setting
MediumCVSS 6.4No exploitEPSS 0%stellarwp · givewp – donation plugin and fundraising platformJul 16, 2026
- CVE-2026-1324625Monitor
GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attribute
MediumCVSS 6.4No exploitEPSS 0%stellarwp · givewp – donation plugin and fundraising platformJul 1, 2026